Re: [TLS] TLS 1.2 and hash agility for signatures

Pasi.Eronen@nokia.com wrote:
> 
> Given that some signature algorithms have more tweakable parameters
> than just the hash algorithm (e.g. PSS has salt length, MGF and the
> MGF's hash algorithm), perhaps the simplest solution would be just to
> use DER-encoded AlgorithmIdentifier structures (instead of defining
> a new IANA-maintained number space just for TLS)? 
> 
> (Of course, a sane implementation probably wouldn't include a 
> DER encoder/decoder, but just list of octet strings for things it
> supports; e.g. 0x3021300906052b0e03021a05000414 for RSASSA-PKCS1-v1_5
> with SHA-1.)

Aren't the RSA-PSS additional parameters included in the algorithm
identifier structure, which results in a non-static Octetstring?

-Martin

_______________________________________________
TLS mailing list
TLS@lists.ietf.org
https://www1.ietf.org/mailman/listinfo/tls